This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft File: R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json) Hash identifier: TXZBqyIoXViiXyOHXdd9XqTEZRl2cKF101df+03sqhg= Subject key identifier: C5:3F:C0:2C:78:FB:12:F1:70:C8:17:8A:DC:FE:09:71:8E:C7:8D:DC Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7 Certificate issuer: /CN=47eeffc2714624b9237dade53fbd2441f4192ac7 Certificate serial: 019B3EA3750F73AEA3370F57778F6691C42A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft Manifest number: 0726 Signing time: Sun 21 Dec 2025 02:00:58 +0000 Manifest this update: Sun 21 Dec 2025 02:00:58 +0000 Manifest next update: Mon 22 Dec 2025 02:00:58 +0000 Files and hashes: 1: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: iegBxTx1TBipH5+v2Cxe8TXkCArFi2DoVZVFDkrydEA=) 2: b0DuHL5Cx5oz0wmVPh9cLl0pYOs.roa (hash: 0vfXcmcuR2v9A+x1r5OGZhYbvc69ht+h4cnEKv+PZSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:75:0f:73:ae:a3:37:0f:57:77:8f:66:91:c4:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7 Validity Not Before: Dec 21 02:00:58 2025 GMT Not After : Dec 22 02:00:58 2025 GMT Subject: CN=c53fc02c78fb12f170c8178adcfe09718ec78ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:28:ec:cb:cc:00:78:c0:9d:10:ca:f7:a9:81: 49:34:14:43:94:b6:ee:3f:d0:35:21:3f:fb:8e:b5: f6:a0:f4:60:47:48:30:33:d7:9b:cf:0a:e4:75:fd: 39:67:fa:dd:f6:19:d5:13:53:78:9e:5b:61:9c:e1: 31:c9:30:67:93:51:a2:7e:a8:7e:8d:74:7a:64:8e: 3d:38:82:2f:1f:fa:11:a7:6b:19:b1:cc:fe:c0:c5: 77:16:23:10:f9:ce:d5:22:c8:df:e1:a4:ac:c3:93: ec:83:59:28:fa:d3:56:00:51:e8:9d:90:99:ad:11: 61:0c:7d:1e:b4:89:83:66:44:d7:43:97:68:b6:c6: e6:e8:57:3d:b2:b8:bc:ee:fd:4b:36:9a:79:ed:ee: 77:be:e3:10:48:94:5d:30:82:fc:a6:d1:02:7d:be: 24:ff:d0:bb:6b:19:1c:1b:3d:11:aa:88:c2:cb:63: 36:73:09:ab:da:a0:d2:75:a2:80:c7:66:5f:ae:ca: 31:68:14:71:af:29:9e:61:25:73:22:f1:76:a9:01: bd:a2:33:ad:82:ca:dd:76:a7:83:57:f2:cd:4a:44: 60:60:3f:3e:74:06:db:17:e2:2d:4f:cf:c9:41:34: 9d:90:d2:22:34:e3:0a:71:14:b9:0a:49:89:6e:44: 90:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:3F:C0:2C:78:FB:12:F1:70:C8:17:8A:DC:FE:09:71:8E:C7:8D:DC X509v3 Authority Key Identifier: keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:8d:d9:5b:04:12:fc:52:0d:b3:9a:dd:9d:58:1f:fa:75:f9: 08:02:9e:ae:af:47:d6:48:a2:d7:c3:8a:4d:ba:96:1d:cd:cc: 01:90:5a:33:46:df:83:b0:09:c5:51:ee:e3:53:c9:1c:05:80: 08:1f:f3:eb:d1:f5:85:76:f0:5d:4f:7d:9c:fd:fa:4f:22:e0: 96:3e:17:59:f2:1a:b8:f9:e3:52:57:8e:1b:77:b2:21:d2:c3: 02:1d:41:f5:05:c0:60:c2:c6:1d:47:d7:11:57:f9:94:dc:6c: 55:cb:bf:34:97:9b:65:43:92:81:05:9c:a8:f8:cf:f5:30:d6: bb:29:22:99:37:95:7f:fc:8c:40:d8:32:d5:b7:d0:71:e5:82: e7:39:d6:5a:08:ab:de:d3:64:84:d4:7c:33:aa:e5:f5:86:46: 96:d0:60:3d:a6:3f:ea:75:87:05:97:52:74:5c:3e:ee:91:28: 35:ec:13:e3:90:72:0f:66:af:4c:c6:db:ba:f5:15:87:8c:31: e0:10:73:07:3b:89:e2:4d:f1:86:ea:73:c4:34:f7:41:2e:77: 57:9b:ed:1d:8b:b4:ea:99:a5:30:7e:ce:46:95:19:29:b0:32: 0c:f7:06:50:87:bb:57:08:94:3f:c5:c7:4c:f2:96:d0:42:2b: 17:06:55:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o3UPc66jNw9Xd49mkcQqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZWVmZmMyNzE0NjI0YjkyMzdkYWRlNTNmYmQyNDQxZjQx OTJhYzcwHhcNMjUxMjIxMDIwMDU4WhcNMjUxMjIyMDIwMDU4WjAzMTEwLwYDVQQD EyhjNTNmYzAyYzc4ZmIxMmYxNzBjODE3OGFkY2ZlMDk3MThlYzc4ZGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCjsy8wAeMCdEMr3qYFJNBRDlLbu P9A1IT/7jrX2oPRgR0gwM9ebzwrkdf05Z/rd9hnVE1N4nlthnOExyTBnk1Gifqh+ jXR6ZI49OIIvH/oRp2sZscz+wMV3FiMQ+c7VIsjf4aSsw5Psg1ko+tNWAFHonZCZ rRFhDH0etImDZkTXQ5dotsbm6Fc9sri87v1LNpp57e53vuMQSJRdMIL8ptECfb4k /9C7axkcGz0RqojCy2M2cwmr2qDSdaKAx2ZfrsoxaBRxrymeYSVzIvF2qQG9ojOt gsrddqeDV/LNSkRgYD8+dAbbF+ItT8/JQTSdkNIiNOMKcRS5CkmJbkSQ8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMU/wCx4+xLxcMgXitz+CXGOx43cMB8GA1UdIwQY MBaAFEfu/8JxRiS5I32t5T+9JEH0GSrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMt ZDQ5OTIzYTE1ZmQ5LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMtZDQ5OTIzYTE1ZmQ5 LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0I3ZWwQS /FINs5rdnVgf+nX5CAKerq9H1kii18OKTbqWHc3MAZBaM0bfg7AJxVHu41PJHAWA CB/z69H1hXbwXU99nP36TyLglj4XWfIauPnjUleOG3eyIdLDAh1B9QXAYMLGHUfX EVf5lNxsVcu/NJebZUOSgQWcqPjP9TDWuykimTeVf/yMQNgy1bfQceWC5znWWgir 3tNkhNR8M6rl9YZGltBgPaY/6nWHBZdSdFw+7pEoNewT45ByD2avTMbbuvUVh4wx 4BBzBzuJ4k3xhupzxDT3QS53V5vtHYu06pmlMH7ORpUZKbAyDPcGUIe7VwiUP8XH TPKW0EIrFwZV5Q== -----END CERTIFICATE-----Generated at Sun Dec 21 12:12:38 2025 by rpki-client